CVE-2024-29895-CactiRCE-PoC

Cacti RCE - CVE-2024-29895 Usage: python3 cve-2024-29895.py -u https://target.com/ -c id Affecting Cacti versions 1.3.X on DEV builds where cmdrealtime.php is present and POLLERID is enabled. Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query...

CVE-2024-52301-Research

CVE-2024-52301-Research A bit of research around CVE-2024-52301. I've seen the vuln and wanted to find out how Laravel is vulnerable. For this, I just diffed the 6.20.44 and 6.20.45 versions, and traced how GET parameters could end up changing the application configuration. I've written about thi...

CVE-2026-74251

Unauthenticated SQL Injection via Attribute Filter in Phoca Cart Phoca Cart ≤ 6.1.6 — Unauthenticated Attacker Extracts Full Database via Time-Based Blind Injection SUMMARY The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQ...

semcms

Introducción a Semcms SEMCMS es un sistema de gestión de contenidos CMS para sitios web de comercio exterior que admite múltiples idiomas. root@kitploit: v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip Causas de las vulnerabilidades: /xcR45qAdmin/SEMCMSMenu.php Línea ...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

CVE-2026-58457

CVE-2026-58457 - Inyección de comandos del sistema operativo no autenticada en el repetidor Wi-Fi Shenzhen Aitemi M300 !WARNING Este código se proporciona tal cual, únicamente con fines educativos y de investigación. No utilice este PoC en sistemas de producción, entornos compartidos ni en...

CVE-2025-47423

CVE-2025-47423 – Local File Inclusion in Personal Weather Station Dashboard 12lts Discovered by: Matthew Eagle Status: Public Disclosure Date Reported: 2025-05-05 CVE ID: CVE-2025-47423 🧩 Summary A Local File Inclusion LFI vulnerability in the Personal Weather Station Dashboard version 12lts allo...

Wordpress-ebook-CVE-2016-10924

Il plugin Wordpress eBook Download 1.1 presenta una vulnerabilità di divulgazione di file abusando del suo parametro get nel file filedownload.php. Questo script esegue brute force su diversi processi del server sfruttando questa vulnerabilità. USO: python pidbrute.py...

CVE-2025-55885

CVE-2025-55885 Descrição Vulnerabilidade de SQL Injection no Alpes Recherche et Developpement ARD GEC en Ligne antes da v.2025-04-23 permite que um atacante remoto eleve privilégios por meio dos parâmetros GET no index.php Vetores de Ataque SQL injection via parâmetro GET não sanitizado ocid em...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 PoC funzionale per la vulnerabilità CVE-2024-9796, che colpisce il plugin WP Advanced Search autocompletion su WordPress, consentendo un'iniezione SQL SQL Injection attraverso parametri GET non sanificati. 📌 Descrizione Questa vulnerabilità consente a un...

CVE-2020-27368

CVE-2020-27368 TOTOLINK-A702R-V1.0.0-B20161227.1023 Vulnerabilità di indicizzazione delle directory Descrizione L'indicizzazione delle directory nel portale di accesso del portale di accesso di TOTOLINK-A702R-V1.0.0-B20161227.1023 consente a un attaccante di accedere alle directory /icons/ tramit...

CVE-2025-7606

CVE-2025-7606 code-projects AVL Rooms Project V1.0/city.php iniezione SQL NOME DEI PRODOTTI AFFETTI AVL Rooms Homepage del fornitore https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/ segnalatore dazhi File vulnerabile /city.php VERSIONEI V1.0 Link del software...

HotelDruid-CVE-2021-42948

CVE-2021-42948 Bei HotelDruid Hotel Management Software v3.0.3 und früheren Versionen wurde festgestellt, dass Sitzungstoken in mehreren Links über GET-Parameter offengelegt werden, wodurch Angreifer auf Benutzersitzungs-IDs zugreifen können. Das Sitzungstoken, das für den Zugriff auf...

CVE-2025-66947

CVE-2025-66947 Iniezione SQL cieca basata sul tempo in krishanmuraiji SMS v1.0 ⏱️ Confronto visivo: risposta normale vs risposta ritardata di 6s 🔍 Riepilogo TL;DR: Un parametro GET in un modulo amministrativo consente l'iniezione SQL basata sul tempo tramite ritardi nella risposta. In...

CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

CVE-2026-76569

Phoca Download extension versions 5.0.0 through 6.1.4 for Joomla contains a reflected XSS flaw in the search GET parameter; attacker-supplied input is reflected unescaped, enabling script execution in a victim's browser. CVSS 4.0 scores it Medium (5.3). No exploitation or patch version is documen...

PT-2026-78903

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

EUVD-2026-62504

OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a URL that executes arbitrary JavaScript in the browser of any...

PT-2026-78468

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.3.0 Description A cross-site request forgery issue exists in the DICOM viewer. The web path GET parameter in the DICOM viewer page is embedded as a URL without proper sanitization or validation against expected path...

CVE-2026-74251

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An...